Software guide

Handle a subject access request step by step

Recognise a subject access request, confirm identity, search your systems, prepare a clear response and meet the legal time limit without panic.

Estimated time: 3–10 hours spread over the response periodUpdated: 28 September 2026

Use this guide when a customer, former employee or anyone else asks what personal data your business holds about them. A request can arrive in any form, including by email, text or verbally, and does not have to mention the law. This is general information; complex or disputed requests may need professional advice.

Step by step

  1. Recognise and log the request

    Record the date received, who asked and what they asked for. The time limit usually starts from receipt. Acknowledge the request promptly and tell the person when to expect a response.

Members

The rest of this guide is for members

This guide continues with 4 more sections. Unlock this guide and all 207 ABCDayZ guides with checklists, troubleshooting and next steps.

£3.99 for 1 month or £29 for 12 months. One payment, no automatic renewal.

Unlock all guides

Already a member on another device? Open your personal access link. Bought Programming with AI? Your first month is included.